Compare commits
No commits in common. "57582cc81567a23fb0a6d5c3d664d2034ebe1b4b" and "60cb3d141973c00190da1d45589bf20a7ff8b052" have entirely different histories.
57582cc815
...
60cb3d1419
|
@ -3,7 +3,7 @@ authentik:
|
||||||
enabled: false
|
enabled: false
|
||||||
global:
|
global:
|
||||||
image:
|
image:
|
||||||
tag: 2024.6.1
|
tag: 2024.6.0
|
||||||
env:
|
env:
|
||||||
- name: AUTHENTIK_WEB__THREADS
|
- name: AUTHENTIK_WEB__THREADS
|
||||||
value: "2"
|
value: "2"
|
||||||
|
|
|
@ -6,7 +6,7 @@ helmCharts:
|
||||||
releaseName: authentik
|
releaseName: authentik
|
||||||
repo: https://charts.goauthentik.io
|
repo: https://charts.goauthentik.io
|
||||||
valuesFile: ./authentik.yml
|
valuesFile: ./authentik.yml
|
||||||
version: 2024.6.1
|
version: 2024.6.0
|
||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
namespace: authentik
|
namespace: authentik
|
||||||
resources:
|
resources:
|
||||||
|
|
|
@ -4,6 +4,7 @@ kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
name: e6-gallery
|
name: e6-gallery
|
||||||
namespace: e6-gallery
|
namespace: e6-gallery
|
||||||
|
|
||||||
spec:
|
spec:
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
|
|
|
@ -33,9 +33,6 @@ spec:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
key: username
|
key: username
|
||||||
name: postgres-soju
|
name: postgres-soju
|
||||||
envFrom:
|
|
||||||
- secretRef:
|
|
||||||
name: soju
|
|
||||||
image: git.gmem.ca/arch/soju:s3
|
image: git.gmem.ca/arch/soju:s3
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
name: soju
|
name: soju
|
||||||
|
|
|
@ -1,12 +1,9 @@
|
||||||
listen ircs://
|
listen ircs://
|
||||||
listen unix+admin:///app/admin
|
listen unix+admin:///app/admin
|
||||||
listen http+insecure://
|
listen ws+insecure://
|
||||||
listen http+prometheus://localhost:9090
|
listen http+prometheus://localhost:9090
|
||||||
hostname irc.gmem.ca
|
hostname irc.gmem.ca
|
||||||
title irc.gmem.ca
|
title irc.gmem.ca
|
||||||
db postgres "dbname=soju"
|
db postgres "dbname=soju"
|
||||||
message-store db
|
message-store db
|
||||||
tls /ssl/tls.crt /ssl/tls.key
|
tls /ssl/tls.crt /ssl/tls.key
|
||||||
|
|
||||||
file-upload s3 https://7dc420732ea679a530aee304ea49a63c.r2.cloudflarestorage.com/gabrielsimmer-com
|
|
||||||
file-cdn https://stash.arch.dog
|
|
|
@ -27,4 +27,3 @@ resources:
|
||||||
- vaultwarden
|
- vaultwarden
|
||||||
- smarthome
|
- smarthome
|
||||||
- cert-manager
|
- cert-manager
|
||||||
- e6-gallery
|
|
||||||
|
|
|
@ -34,18 +34,3 @@ spec:
|
||||||
rolloutRestartTargets:
|
rolloutRestartTargets:
|
||||||
- name: vaultwarden
|
- name: vaultwarden
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
---
|
|
||||||
apiVersion: secrets.hashicorp.com/v1beta1
|
|
||||||
kind: VaultStaticSecret
|
|
||||||
metadata:
|
|
||||||
name: vaultwarden-keys
|
|
||||||
namespace: vaultwarden
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
create: true
|
|
||||||
name: vaultwarden-keys
|
|
||||||
mount: kv
|
|
||||||
path: vaultwarden/keys
|
|
||||||
refreshAfter: 30s
|
|
||||||
type: kv-v2
|
|
||||||
vaultAuthRef: vault
|
|
||||||
|
|
|
@ -4,7 +4,7 @@ metadata:
|
||||||
name: vaultwarden
|
name: vaultwarden
|
||||||
namespace: vaultwarden
|
namespace: vaultwarden
|
||||||
spec:
|
spec:
|
||||||
replicas: 2
|
replicas: 1
|
||||||
selector:
|
selector:
|
||||||
matchLabels:
|
matchLabels:
|
||||||
app: vaultwarden
|
app: vaultwarden
|
||||||
|
@ -16,26 +16,16 @@ spec:
|
||||||
volumes:
|
volumes:
|
||||||
- name: data-dir
|
- name: data-dir
|
||||||
emptyDir: {}
|
emptyDir: {}
|
||||||
- name: rsa-key
|
|
||||||
secret:
|
|
||||||
secretName: vaultwarden-keys
|
|
||||||
initContainers:
|
|
||||||
- name: copy-keys
|
|
||||||
image: busybox:1.36
|
|
||||||
command: ['sh', '-c', 'cp /keys/rsa_key.pem /data' ]
|
|
||||||
volumeMounts:
|
|
||||||
- name: data-dir
|
|
||||||
mountPath: /data
|
|
||||||
- name: rsa-key
|
|
||||||
mountPath: /keys
|
|
||||||
containers:
|
containers:
|
||||||
- name: vaultwarden
|
- name: vaultwarden
|
||||||
image: vaultwarden/server:1.31.0
|
image: vaultwarden/server:1.31.0
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
memory: "256Mi"
|
memory: "128Mi"
|
||||||
|
cpu: "500m"
|
||||||
requests:
|
requests:
|
||||||
memory: "32Mi"
|
memory: "64Mi"
|
||||||
|
cpu: "100m"
|
||||||
envFrom:
|
envFrom:
|
||||||
- secretRef:
|
- secretRef:
|
||||||
name: vaultwarden
|
name: vaultwarden
|
||||||
|
@ -51,20 +41,6 @@ spec:
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 80
|
- containerPort: 80
|
||||||
name: web
|
name: web
|
||||||
livenessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /alive
|
|
||||||
port: 80
|
|
||||||
failureThreshold: 1
|
|
||||||
initialDelaySeconds: 2
|
|
||||||
periodSeconds: 10
|
|
||||||
readinessProbe:
|
|
||||||
httpGet:
|
|
||||||
path: /alive
|
|
||||||
port: 80
|
|
||||||
failureThreshold: 1
|
|
||||||
initialDelaySeconds: 2
|
|
||||||
periodSeconds: 10
|
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: data-dir
|
- name: data-dir
|
||||||
mountPath: /data
|
mountPath: /data
|
||||||
|
|
Binary file not shown.
Binary file not shown.
Binary file not shown.
Loading…
Reference in a new issue